Re: ipfw tee fixed [cvs commit: src/sbin/ipfw ipfw.8 src/sys/netinet ip_fw_pfil.c]

From: Ruslan Ermilov <ru_at_FreeBSD.org>
Date: Mon, 13 Sep 2004 21:54:52 +0300
On Mon, Sep 13, 2004 at 08:44:12PM +0200, Andre Oppermann wrote:
> Ruslan Ermilov wrote:
> >On Mon, Sep 13, 2004 at 06:51:56PM +0200, Andre Oppermann wrote:
> >
> >>I've fixed 'ipfw tee' in 6-current.  Please try it and report back.  This
> >>is pretty useful for passive packet monitoring.
> >>
> >
> >Just to make it crystal clear for everyone, the tee'd fragments are
> >still reassembled into a full packet before the diversion, correct?
> 
> No, they are not.  Only diverted packets are reassembled, tee'd packet
> are not.
> 
Then at least the divert(4) manpage should be updated to document the
difference in behavior (between "divert" and "tee").


Cheers,
-- 
Ruslan Ermilov
ru_at_FreeBSD.org
FreeBSD committer

Received on Mon Sep 13 2004 - 16:54:55 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:11 UTC